specfact-cli 0.36.1__tar.gz → 0.37.1__tar.gz

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specfact-cli
-Version: 0.36.1
+Version: 0.37.1
 Summary: The swiss knife CLI for agile DevOps teams. Keep backlog, specs, tests, and code in sync with validation and contract enforcement for new projects and long-lived codebases.
 Project-URL: Homepage, https://github.com/nold-ai/specfact-cli
 Project-URL: Repository, https://github.com/nold-ai/specfact-cli.git

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "specfact-cli"
-version = "0.36.1"
+version = "0.37.1"
 description = "The swiss knife CLI for agile DevOps teams. Keep backlog, specs, tests, and code in sync with validation and contract enforcement for new projects and long-lived codebases."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -377,6 +377,9 @@ packages = [
 "resources/templates" = "specfact_cli/resources/templates"
 "resources/schemas" = "specfact_cli/resources/schemas"
 "resources/mappings" = "specfact_cli/resources/mappings"
+"resources/keys" = "specfact_cli/resources/keys"
+"modules/backlog-core" = "specfact_cli/modules/backlog-core"
+"modules/bundle-mapper" = "specfact_cli/modules/bundle-mapper"
 # Note: resources/semgrep files are in src/specfact_cli/resources/semgrep/ and are automatically included
 
 [tool.hatch.build.targets.sdist]

specfact_cli-0.37.1/resources/keys/README.md

@@ -0,0 +1,14 @@
+Public verification keys for bundled module signatures.
+
+Default key path expected by SpecFact CLI runtime:
+
+- Repo source: `resources/keys/module-signing-public.pem`
+- Installed package: `resources/keys/module-signing-public.pem`
+
+Runtime resolution order:
+
+1. Explicit public key argument (internal call path)
+2. `SPECFACT_MODULE_PUBLIC_KEY_PEM` environment variable
+3. Bundled key file (source path first, then installed package path)
+
+Do not store private signing keys in this repository.

specfact_cli-0.37.1/resources/keys/module-signing-public.pem

@@ -0,0 +1,3 @@
+-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAI97L4DRdUtcB3lul4BtBsrpF5hWBu7z5Z5fNA6/AY18=
+-----END PUBLIC KEY-----

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/__init__.py

@@ -8,6 +8,6 @@ This package provides command-line tools for:
 - Supporting agile ceremonies and team workflows
 """
 
-__version__ = "0.36.1"
+__version__ = "0.37.1"
 
 __all__ = ["__version__"]

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/cli.py

@@ -337,33 +337,6 @@ class _LazyDelegateGroup(click.Group):
     def _make_delegate_command(self) -> click.Command:
         cmd_name = self._lazy_cmd_name
 
-        def _normalize_init_optional_module_flags(argv: list[str]) -> list[str]:
-            """
-            Normalize bare init module flags to sentinel values.
-
-            Typer/Click options declared with value types require an argument. To support
-            UX like `specfact init --enable-module` in interactive mode, rewrite bare flags
-            to include a sentinel token consumed by init command logic.
-            """
-            if cmd_name != "init":
-                return argv
-            out: list[str] = []
-            i = 0
-            while i < len(argv):
-                token = argv[i]
-                if token in ("--enable-module", "--disable-module"):
-                    out.append(token)
-                    if i + 1 < len(argv) and not argv[i + 1].startswith("-"):
-                        out.append(argv[i + 1])
-                        i += 2
-                        continue
-                    out.append("__interactive_select__")
-                    i += 1
-                    continue
-                out.append(token)
-                i += 1
-            return out
-
         def _invoke(args: tuple[str, ...]) -> None:
             from typer.main import get_command
 
@@ -380,7 +353,6 @@ class _LazyDelegateGroup(click.Group):
                 p = getattr(p, "parent", None)
             prog_name = " ".join(reversed(parts)) if parts else cmd_name
             args_list = list(args)
-            args_list = _normalize_init_optional_module_flags(args_list)
             # When the real app is a single command (e.g. drift has only "detect"), Typer
             # builds a TyperCommand, not a Group. Then args are ["detect", "bundle", "--repo", ...]
             # and the command expects ["bundle", "--repo", ...] (no leading "detect").

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/models/module_package.py

@@ -152,7 +152,7 @@ class ModulePackageMetadata(BaseModel):
     )
     description: str | None = Field(default=None, description="Module description for user-facing module details")
     license: str | None = Field(default=None, description="SPDX license identifier or license name")
-    source: str = Field(default="builtin", description="Module source: builtin, marketplace, or custom")
+    source: str = Field(default="builtin", description="Module source: builtin, project, user, marketplace, or custom")
 
     @beartype
     @ensure(lambda result: isinstance(result, list), "Validated bridges must be returned as a list")
@@ -163,6 +163,6 @@ class ModulePackageMetadata(BaseModel):
     @model_validator(mode="after")
     def validate_source(self) -> ModulePackageMetadata:
         """Validate source is one of supported module origins."""
-        if self.source not in {"builtin", "marketplace", "custom"}:
-            raise ValueError("source must be one of: builtin, marketplace, custom")
+        if self.source not in {"builtin", "project", "user", "marketplace", "custom"}:
+            raise ValueError("source must be one of: builtin, project, user, marketplace, custom")
         return self

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/analyze/module-package.yaml

@@ -1,5 +1,5 @@
 name: analyze
-version: 0.36.1
+version: 0.37.1
 commands:
   - analyze
 command_help:
@@ -14,3 +14,6 @@ publisher:
   email: oss@nold.ai
 description: Analyze codebase quality, contracts, and architecture signals.
 license: Apache-2.0
+integrity:
+  checksum: sha256:81401deb9416cb772437ab806dbc377778f7cf4d2986e8169765de59d1708733
+  signature: YfTBJOyF5OxkRkIg5Fffqtbc3DHa/eXoewyav97FwEMRZoqRXH6Fhhu80UUjKPEYMWP5JzRU8dWgvi8FgfFqBQ==

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/auth/module-package.yaml

@@ -1,5 +1,5 @@
 name: auth
-version: 0.36.1
+version: 0.37.1
 commands:
   - auth
 command_help:
@@ -14,3 +14,6 @@ publisher:
   email: oss@nold.ai
 description: Authenticate SpecFact with supported DevOps providers.
 license: Apache-2.0
+integrity:
+  checksum: sha256:d085de940d5de887f858462eff10a75e5acdb2e31cc61ed7dc79bfe6e4527e76
+  signature: SyoiHxZHlmQLzdnqn45c8B/dzZuqyWzflAo/hf0PWsckPSfeGN6ytlGgTJPV8Rq8IG96aVnPkir2dEJ4gavxAQ==

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/backlog/module-package.yaml

@@ -1,5 +1,5 @@
 name: backlog
-version: 0.36.1
+version: 0.37.1
 commands:
   - backlog
 command_help:
@@ -27,3 +27,6 @@ publisher:
   email: oss@nold.ai
 description: Manage backlog ceremonies, refinement, and dependency insights.
 license: Apache-2.0
+integrity:
+  checksum: sha256:db36a40672119b436b50bd4142400feec3398ae2732cfa357eacb7b40d8b8582
+  signature: NXgVtRf+ubB+upfAacJUTX8yaGw/cdZa9SSxqusak3ijGZe5POtK+ud+n2lnVMCg/9pOzoq8wdgsTrVr3mkCDA==

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/contract/module-package.yaml

@@ -1,5 +1,5 @@
 name: contract
-version: 0.36.1
+version: 0.37.1
 commands:
   - contract
 command_help:
@@ -14,3 +14,6 @@ publisher:
   email: oss@nold.ai
 description: Validate and manage API contracts for project bundles.
 license: Apache-2.0
+integrity:
+  checksum: sha256:577b9ee6af8075c0ebf58665a50ec5be6b2de935f401454f831447905320b649
+  signature: gHyTzZkYnLDxf27XFNHH/pauUhZ5ZZfTwPNQBwWCZ/v4oEdDV8gGjDr84g2KSsH8myrE7J8q47iBChxqO+FjBw==

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/drift/module-package.yaml

@@ -1,5 +1,5 @@
 name: drift
-version: 0.36.1
+version: 0.37.1
 commands:
   - drift
 command_help:
@@ -14,3 +14,6 @@ publisher:
   email: oss@nold.ai
 description: Detect and report drift between code, plans, and specs.
 license: Apache-2.0
+integrity:
+  checksum: sha256:5bf84d0a840bbdb47ccacda4490d19685d1298c3f7fd3b8e48ca641a08727e08
+  signature: S8djuQsc+7LBZH8myx+aUNeSfSpnLHXL70iCrK9yCfyYJbqDklQpKNxBGJQ4DjzrApm6ZyTBoxZdmA1BxDvDBw==

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/enforce/module-package.yaml

@@ -1,5 +1,5 @@
 name: enforce
-version: 0.36.1
+version: 0.37.1
 commands:
   - enforce
 command_help:
@@ -15,3 +15,6 @@ publisher:
   email: oss@nold.ai
 description: Apply governance policies and quality gates to bundles.
 license: Apache-2.0
+integrity:
+  checksum: sha256:16a8bc8d027b175321696f01fceb40a3cbc4a0567fe165c560be94221e412f88
+  signature: OuAE5iZ7AxSsD6VDfm5YKCtxQLJ33i4ACEW/5ejiWY0wlsgQtpkf2CMZaXWUBvS9GvxhID6PS3+yJMgzAaHBAA==

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/generate/module-package.yaml

@@ -1,5 +1,5 @@
 name: generate
-version: 0.36.1
+version: 0.37.1
 commands:
   - generate
 command_help:
@@ -15,3 +15,6 @@ publisher:
   email: oss@nold.ai
 description: Generate implementation artifacts from plans and SDD.
 license: Apache-2.0
+integrity:
+  checksum: sha256:d9dd799f0a13dc07d2200fdfbe5a4ce3cf869c2737d08f4101cebf3d4ff983fd
+  signature: 7IWVqUEAcD06JdiOinxBUQYp1coH81AecR0KXBQiy+O4XWg9/zI9YQVwWurXWozsSgCBeT/D4HOQ4bxOvrw3DQ==

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/import_cmd/module-package.yaml

@@ -1,5 +1,5 @@
 name: import_cmd
-version: 0.36.1
+version: 0.37.1
 commands:
   - import
 command_help:
@@ -14,3 +14,6 @@ publisher:
   email: oss@nold.ai
 description: Import projects and requirements from code and external tools.
 license: Apache-2.0
+integrity:
+  checksum: sha256:290a3dbe86dce079ed7cde343893830725ff80068fa89a8d0b0fd935bb746dfa
+  signature: ITiHkBu+zHOChLHGlXh3IQakaHxcFasY+ifLkWhbY9J8/d7hb3fEMz3t0IB3F3/VXi+dvsQdPhxha+baAVpvAA==

{specfact_cli-0.36.1 → specfact_cli-0.37.1}/src/specfact_cli/modules/init/module-package.yaml

@@ -1,5 +1,5 @@
 name: init
-version: 0.36.1
+version: 0.37.1
 commands:
   - init
 command_help:
@@ -14,3 +14,6 @@ publisher:
   email: oss@nold.ai
 description: Initialize SpecFact workspace and bootstrap local configuration.
 license: Apache-2.0
+integrity:
+  checksum: sha256:e6d6cdf1c10a6a760388db5a66e0f666f93b0835dfff1c3db13b19f8da9bce13
+  signature: IvGAdhMfLOyArra2PKdxqN0ozHw6m4gvZh0sEjiLSWx/2hiDDSXHSy6uHx4hEx0868bhknE6mvyUAAL3PZ4XCg==